Privacy Policy
Ski Map · Draft of 14 October 2026
Draft, not yet legally reviewed. This describes how the friends feature is built. The parts marked like this must be filled in, and the whole text checked by someone who knows EU data-protection law, before the app is used by the public.
Who is responsible
The controller of your personal data is [name and address of the owner or company]. Contact for privacy questions: [email address].
What we collect and why
Using Ski App needs an account: you sign in before the dashboard, the map and the other pages open. You never have to share your location: your position is only used on your own device, to show the blue dot, unless you turn on location sharing.
When you create an account, we process:
| Data | Why | How long |
|---|---|---|
| Name and email address | Your account, signing in, and letting friends find you by email | Until you delete your account |
| A sign-in token, kept in your browser on your device | Keeping you signed in, so you don't type your password every time | Until you sign out. With "Remember this device" unticked, until you close the browser. |
| Friends and friend requests | Knowing who may see your location and message you | Until you or your friend removes the friendship |
| Your location (latest position and its accuracy only) | Showing you on the map of the friends you choose, only while sharing is on | Deleted when you stop sharing or turn location off. Hidden from friends after 2 hours without an update, then deleted. We never keep a history of where you've been. |
| Sharing settings and the time you agreed to share | Respecting your choices and recording your consent | Until you delete your account |
| Messages, quick signals and locations you send to a friend | Delivering them to that friend | 30 days |
| SOS alerts you send to friends (a message with your position, nearest piste or lift and resort) | Telling the friends you pick that you need help | 30 days, like other messages |
Emergency SOS. The SOS panel works out your coordinates and the nearest piste or lift on your own device. Calls and text messages you start from it go through your phone's dialler and messages app, directly to the number you choose; we don't see or store them. Nothing is sent to us unless you choose to alert friends. When you call 112, your phone may send its position to the emergency services by itself (Advanced Mobile Location); that is a feature of your phone, not of this app.
Find my resort. Your answers to the questionnaire, including the starting point you choose (a town, or your position if you tap "Use my location"), are kept in your browser on your device so the questions are filled in next time. The matching is done on your device; nothing is sent to us or to anyone else. You can clear them by clearing this site's data in your browser.
Remember this device. When you sign in with "Remember this device" ticked, a sign-in token is kept in your browser's storage on that device, so the app opens without asking for your password again. Untick it on a shared computer and the token is kept only until you close the browser. Signing out removes it either way. We don't keep a list of your devices, and the token isn't used to track you.
Resorts saved for offline use. When you save a resort for offline use, its map tiles and details are stored in your browser on your device, along with the website's own files, so the map works without signal. Nothing about you is in them, and they are never sent to us. You can remove a saved resort from its card at any time, or clear them all by clearing this site's data in your browser.
Legal basis
We share your location only with your consent (Article 6(1)(a) GDPR), which you give when you turn sharing on, and can withdraw at any time by turning it off. Your account, friends and messages are processed to provide the service you asked for (Article 6(1)(b) GDPR).
Who can see your data
- Your location: only accepted friends you share with: all your friends, or only the ones you pick.
- Your name and email: your friends and people you've sent a request to or received one from.
- Messages: only you and the friend you sent them to.
We don't sell your data or use it for advertising. Our data is stored by our hosting provider, Supabase, in a data centre in the EU [confirm region, e.g. Frankfurt, and sign Supabase's data processing agreement]. Map tiles and resort search are loaded from OpenFreeMap, OpenSkiMap and Amazon Web Services; these services receive your IP address and the map area you view, but not your account or location data.
Google reviews. A resort's Reviews tab only links to that resort on Google Maps; nothing is sent to Google until you tap the link. Google Maps then opens and handles your visit under the Google Privacy Policy.
Your rights
- Stop sharing your location at any time with the switch in the Friends panel.
- Download your data from the Friends panel (Privacy → Download my data).
- Delete your account and all its data from the Friends panel (Privacy → Delete my account).
- You can also ask us to correct your data, restrict or object to its use, and you can complain to your national data-protection authority.
Children
The friends feature is meant for people aged [16] or older. [Decide the minimum age; it differs between EU countries (13–16) and affects whether parental consent is needed.]
Safety notice
Shared locations can be delayed or inaccurate, especially in poor signal. Don't rely on the friends feature in an emergency: call 112.
The SOS panel helps you call for help and read out your location. It doesn't contact the rescue services itself, and we can't guarantee that a call, text or alert gets through or that anyone responds.
Changes
If we change this policy, we'll update the date above and tell you in the app before the change affects you.